Duties/Tasks and Responsibilities:
- Perform a variety of Information Assurance (IA) and Computer Network Defense (CND) functions which are broad in nature and support multi-tier IA and CND functions to include, but not limited to, systems engineer, audit/inspection, infrastructure support, certification and accreditation, vulnerability management, detection and response support services
- Provide support for a program, organization, system, or enclave's information assurance program
- Provide security certification test and evaluation of assets, vulnerability management and response, security assessments, and customer support
- Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
- Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
- Assist with the management of security aspects of the information system and performs day-to-day security operations of the system
- Evaluate security solutions to ensure they meet security requirements for processing classified information
- Perform vulnerability/risk assessment analysis to support certification and accreditation
- Provide configuration management (CM) for information system security software, hardware, and firmware
- Manage changes to system and assesses the security impact of those changes
- Prepare and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
- Execute policies and guidance provided by senior functional/technical leads
- Ability to understand basic concepts (to include basic grammar concepts), responsible for writing technical copies of various document types; assist in preparing and maintaining operations documentation, user guides, manuals and technical publications
- Gather technical information, prepare written text; maintain a current internal documentation library; use multiple word processing and presentation tools such as MS Word, PowerPoint, Visio, etc.
